Version 2.7.0

= Version 2.7.0 – October 7, 2024 =

• Enhanced security extensions...
  • Add custom secure nonce on login and lost password pages.
  • Block REST index list, WP core REST routes, non-rest json requests.
  • Required and/or blocked http header(s) (prevent CDN bypass).
• Do not assume session IP is correct in getVisitorIP().
• Fixed getVisitorIP() when proxied (i.e. before cloud flare).
• Fixed isNewVisitor() set with visitor cookie.
• Check Cf-Ipcountry for visitor country code.
• Fixed (load) admin css when extension is disabled.
• Bumped v2.6.2 (never released) to v2.7.0
• Removed Ajax device fingerprinting.
• Purge expired transients on cache clearing and automatically (daily).
  • Force minimum transient expiration with transient sessions.
• New text_to_array() function to split textarea to array of lines.
• Updated wpconfig-transformer to v1.3.6
• Reworked/simplified installed mu autoloader and autoloader class with new 'autoload.php'.
• Removed setEmailNotification() from autoloader and emailFatalNotice standard option.
• Changed advanced mode link on settings page (essentials|advanced).
• Reworked debugging extension and logging with new logger helper compatible with PSR-3 logging.
  • See : https://eacdoojigger.earthasylum.com/how-to/#use-debugging-logger-methods
  • New PSR-3 logging method : $this->log( $level, $message, $context )
  • Or e.g. : eacDoojigger->log('error', $message, $context )
• Support/compliance with WP Consent API.
• has_cookie_consent() method to check consent.
• New cookie methods supporting WP Consent API (if active).
  • See: https://eacdoojigger.earthasylum.com/how-to/#wp-consent-api-and-cookies
  • set_cookie(string $name, string $value, $expires=0, array $options=[], $consent=[])
• Allow/default session access from derivative plugins when using setVariable() and getVariable().
• Added action {pluginname}_startup after plugins_loaded, before loading extensions.
• Session debugging filter for eacDoojigger_debugging.